News for hackers. Stuff that matters.

A comment on Tor Exit Nodes in Libraries – Pilot. Parent comment

Re:Tor Exit Nodes in Libraries – Pilot by jlgaddis on Thursday July 30, 2015 @04:51PM (#9978001)
> The NSA relies on SELinux as a part of their internal computer security system.

And DISA STIGs (e.g., for RHEL) require SELinux to be enabled and enforcing.

[ Parent | on HN ]
Re:Tor Exit Nodes in Libraries – Pilot by simoncion on Thursday July 30, 2015 @05:13PM (#9978172)
Man, those STIGs are both a blessing and a curse for defense contractors.

A blessing, 'cause if your system is configured as per the STIG, there's not a damn thing the auditors can say when they roll through.

A curse for many folks deploying a Linux system, 'cause if your particular variant of Linux doesn't have a STIG, -regardless of how similar it is to one that does- IME there's next to nothing you can do to get an auditor to approve the hardening work you've done.

[ Parent | on HN ]